Mattermost Boards vulnerabilities

3 known CVE vulnerabilities in Mattermost Boards, translated and rated.

CVE-2023-40703Medium
Mattermost fails to properly limit the characters allowed in different fields of a block in Mattermost Boards. An attacker can patch a block field using a specially crafted string to consume excessive resources, possibly leading to Denial of Service.
CVE-2023-3590Low
Mattermost fails to delete card attachments in Boards, allowing an attacker to access deleted attachments.
CVE-2023-3585Medium
Mattermost Boards fail to properly validate a board link, allowing an attacker to crash a channel by posting a specially crafted boards link.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS